Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File:                     XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier:          Me/yFPNHMvBJ4s6cI6D8jt2xcYBwoVQn379BbidViOI=
Subject key identifier:   A3:CE:CA:8F:26:46:A9:B3:C8:31:8F:B6:14:EA:DB:F5:6E:67:65:E4
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer:       /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial:       01989336D48B90E1A957621F6A5118A48C60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number:          0949
Signing time:             Sun 10 Aug 2025 09:01:40 +0000
Manifest this update:     Sun 10 Aug 2025 09:01:40 +0000
Manifest next update:     Mon 11 Aug 2025 09:01:40 +0000
Files and hashes:         1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: TRJvFC5xnIo5D2Z9bay66KnV7Qq07pOs0HVZiQxM2Ys=)
                          2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:36:d4:8b:90:e1:a9:57:62:1f:6a:51:18:a4:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
        Validity
            Not Before: Aug 10 09:01:40 2025 GMT
            Not After : Aug 11 09:01:40 2025 GMT
        Subject: CN=a3ceca8f2646a9b3c8318fb614eadbf56e6765e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:ab:1c:9d:1c:53:08:25:1b:43:54:10:6c:
                    df:b4:15:2c:99:0d:7b:ed:79:9e:47:0b:3c:75:54:
                    e0:56:6a:8a:d4:cc:14:9b:32:91:cf:f6:e1:95:f0:
                    ae:87:0d:30:57:7d:63:d7:8e:de:98:73:90:4c:dd:
                    89:4e:18:7c:7a:02:25:a4:3b:4e:0a:3e:ac:6b:34:
                    7f:a0:5f:91:5e:a5:71:3f:c8:57:46:a2:a1:e5:af:
                    e4:dd:02:11:65:c8:5c:d9:06:7d:f1:b0:d8:b3:b5:
                    47:f6:3f:f2:dd:09:f3:db:1b:c1:d6:70:ed:76:2a:
                    a7:dd:05:c5:8c:8b:e9:ec:f6:37:59:b2:74:6c:5d:
                    1a:c2:79:8a:88:78:db:ed:3b:e5:c8:d2:f6:b1:54:
                    ac:5c:67:c6:e3:9f:ab:6f:7e:32:aa:6c:6b:3d:f2:
                    a0:95:09:02:0b:d5:d1:9a:86:63:3a:8a:c7:5b:58:
                    8c:d6:53:56:43:3d:07:5a:c1:dd:76:b0:46:73:a0:
                    e0:a2:9f:f4:35:07:9c:cd:74:b5:66:ed:d0:fc:e1:
                    69:b5:01:fe:42:98:a1:9f:a9:bf:52:8c:a5:69:3e:
                    79:f1:39:68:ff:10:bf:d0:5d:90:98:94:56:b3:26:
                    32:10:45:0f:17:56:e8:3b:b6:a7:00:22:b6:0e:26:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CE:CA:8F:26:46:A9:B3:C8:31:8F:B6:14:EA:DB:F5:6E:67:65:E4
            X509v3 Authority Key Identifier:
                keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b3:ad:cb:5a:0d:fa:ad:5c:b6:58:ee:a4:93:78:7d:c7:58:
         f4:31:40:17:bb:22:42:99:4c:17:77:60:72:7c:8b:5f:65:a7:
         eb:fd:31:c2:a3:c8:8d:16:b1:30:76:d1:80:b4:4d:f9:33:32:
         4d:24:de:07:18:7c:67:88:d7:90:b8:aa:a0:15:d7:96:ce:e8:
         74:05:da:6e:a1:eb:a6:57:f8:66:8d:e9:0a:2f:d4:3c:e6:93:
         7f:c3:47:2f:6a:6f:58:c1:c3:27:5d:bb:cc:a7:85:e1:b0:ff:
         9d:a1:e0:e8:c8:93:3f:6e:5b:e4:0a:c6:25:8d:33:a2:f2:ea:
         88:ce:68:32:b5:f6:50:25:1d:6d:cf:ae:2e:96:a0:5f:08:c4:
         ab:b6:61:23:b5:53:3a:35:8f:ca:e6:43:ec:84:a1:e4:12:65:
         cf:f4:c0:26:ca:28:87:16:53:4a:33:e0:91:b9:27:1b:9d:67:
         c2:3f:1d:07:15:ee:ad:00:91:cc:55:af:06:5f:ad:b9:ca:50:
         4f:35:97:6c:32:b6:75:c4:00:0b:f0:da:78:98:f9:eb:94:c4:
         23:75:af:a8:fc:5c:b4:5f:ec:de:18:87:18:38:49:37:a2:58:
         93:9e:29:da:1e:a4:b5:0b:be:89:2d:d8:fd:68:dc:7c:6f:7a:
         2a:ca:cd:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNtSLkOGpV2IfalEYpIxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3
N2Q0ZDEwHhcNMjUwODEwMDkwMTQwWhcNMjUwODExMDkwMTQwWjAzMTEwLwYDVQQD
EyhhM2NlY2E4ZjI2NDZhOWIzYzgzMThmYjYxNGVhZGJmNTZlNjc2NWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEurHJ0cUwglG0NUEGzftBUsmQ17
7XmeRws8dVTgVmqK1MwUmzKRz/bhlfCuhw0wV31j147emHOQTN2JThh8egIlpDtO
Cj6sazR/oF+RXqVxP8hXRqKh5a/k3QIRZchc2QZ98bDYs7VH9j/y3Qnz2xvB1nDt
diqn3QXFjIvp7PY3WbJ0bF0awnmKiHjb7TvlyNL2sVSsXGfG45+rb34yqmxrPfKg
lQkCC9XRmoZjOorHW1iM1lNWQz0HWsHddrBGc6Dgop/0NQeczXS1Zu3Q/OFptQH+
Qpihn6m/UoylaT558Tlo/xC/0F2QmJRWsyYyEEUPF1boO7anACK2Diai2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPOyo8mRqmzyDGPthTq2/VuZ2XkMB8GA1UdIwQY
MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct
ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2
LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLOty1oN
+q1ctljupJN4fcdY9DFAF7siQplMF3dgcnyLX2Wn6/0xwqPIjRaxMHbRgLRN+TMy
TSTeBxh8Z4jXkLiqoBXXls7odAXabqHrplf4Zo3pCi/UPOaTf8NHL2pvWMHDJ127
zKeF4bD/naHg6MiTP25b5ArGJY0zovLqiM5oMrX2UCUdbc+uLpagXwjEq7ZhI7VT
OjWPyuZD7ISh5BJlz/TAJsoohxZTSjPgkbknG51nwj8dBxXurQCRzFWvBl+tucpQ
TzWXbDK2dcQAC/DaeJj565TEI3WvqPxctF/s3hiHGDhJN6JYk54p2h6ktQu+iS3Y
/WjcfG96KsrNMg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:07 2025 by rpki-client